diff --git a/AUTHORS.md b/AUTHORS.md
index 8957320678b284e103a397e1424322af97ce1fcd..112940e05bf6174f1cb3858b1e10e787b9539af7 100644
--- a/AUTHORS.md
+++ b/AUTHORS.md
@@ -184,7 +184,6 @@ documentation and additional help.
* Christian Kreidl <christian.kreidl@ziti.uni-heidelberg.de>
ppolicy improvement
-* Kerberos improvement
* Martin Hamant <mh@ow2.org>
Coded the LockUser fonction for the webservice
@@ -247,3 +246,5 @@ documentation and additional help.
* Matthew Newton <matthew.newton@networkradius.com>
EpochDays attributes as human readable
+* Cass Rebbelin <Rebbelin@hisolutions.com>
+ PNG traversal path vulnerability
diff --git a/Changelog.md b/Changelog.md
index 57159ccf8a673db5aa739cf89b5690f60def7e3f..04c5690c959e6f5502b9d72546771b1e9c81d3be 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,116 @@
+## %"FusionDirectory 1.5" - 2025-02-24
+
+### Added
+
+#### fusiondirectory
+- fd#6270 [Snapshot] - Enhancement in order to provide a first concept of revision and source reference
+- fd#6301 [CORE] - Tasks Mail must take into account dynGroups
+- fd#6302 [CORE][TASKS] - Tasks must be set as repeatable and updatable
+- fd#6303 [CORE][MAIL] – Attachments for emails must be created as sub nodes
+- fd#6305 [CORE][Task] - type mail should include a BCC field
+- fd#6306 [CORE] - Issues of services not triggered by account deactivation via lock icon on user list
+- fd#6307 [CORE] - Supann life cycle - automation via Orchestrator
+- fd#6309 Support SSHA512 password if overlay pw-sha2 is installed
+- fd#6314 [CORE] - Snapshots - review of the current automatic creation logic
+- fd#6320 [Tasks] - Mail class can have one method static to be reused outside object call by others
+- fd#6323 [Tasks] - LastExec is performed on localTime and should be set in UTC - always
+- fd#6340 Add callerMAIL as macro in simplePlugin
+- fd#6343 [CORE] - New directory structure numbering
+- fd#6350 [Audit] - Account locked is not logged within audit upon clicking on the lock icon
+- fd#6346 [Recovery] - Usage of supannMailPrivee within password recovery
+- fd#6351 [core] - audit logging - allowing to see attributes => values within audit record. With hiding of values if required.
+- fd#6352 [Core] - SimplePlugin - audit section (logging-modify) - must have a way to detect specific changes within a multi evaluated attributes
+- fd#6354 [CORE] - Tasks - Allow subtasks to received helper information as form of references
+- fd#6357 [core] - new token branch with new objectClass allowing management of specific tokens
+- fd#6359 [Core] - Task - main menu allows periodicity of a cyclic setting - one element is empty
+- fd#6361 Creat a column for showing a supanEtatDate
+- fd#6365 [Core] - Reviewing how the locking mechanism logic work - general lock - supann lock.
+
+#### fusiondirectory-plugins
+- fd-plugins#6055 Add a basic kerberos plugin
+- fd-plugins#6203 [Supann-Ex] - Verification of uniqueness, generation of hash based on login ID and time.
+- fd-plugins#6241 Private form must not be related to the plugin invitations
+- fd-plugins#6258 [NewPlugin] - Notifications, based on automatic snapshots, send email to required personal about attributes changes
+- fd-plugins#6259 Proper way to manage supannCivilite
+- fd-plugins#6260 Update yaml with the new screenshot and tags
+- fd-plugins#6267 [webservice] - Force the usage of the timezone configured within FusionDirectory in order to avoid the default GMT
+- fd-plugins#6277 [Mail] - Render mail unique all the time, not only if allowed to be used as authentication
+- fd-plugins#6278 [LifeCycle] - Move lifeCycle from Core to Plugins
+- fd-plugins#6285 [Audit] - A new task allowing a specific retention date of audit logs with automatic deletion
+- fd-plugins#6290 [Notifications] - Allowing awareness on different supann states values
+- fd-plugins#6298 [Audit] - Migration - obsolete attribute in backend config must be set - fdAuditRotationDelay
+- fd-plugins#6299 [Supann] - supannMailPrivee should contains the following tag : {secours}
+- fd-plugins#6300 [UserReminder] - New task allowing to send notification email when supannStatus "sursis" is at 30 and 15 days of ending the account
+- fd-plugins#6301 [audit] - New backend allowing to hide certain attributes value recorded in audit logs
+- fd-plugins#6305 [Plugins] - fdRPCwebserive - posix force_ids is not taken into consideration correctly
+- fd-plugins#6306 [Notifications] - The Attributes list should not be mandatory - only supann resource.
+- fd-plugins#6307 [Reminder] - Remove manager boolean as forward-to renders this redundant
+- fd-plugins#6318 [Plugins] - supann - Reviewing how the locking mechanism logic work - general lock - supann lock.
+- fd-plugins#6319 [Plugins] - Reviewing how the locking mechanism logic work - mail resource lock - zimbraAccountStatus update
+
+### Changed
+
+#### fusiondirectory
+- fd#6300 [CORE] - UsersGroupsRolesAttribute attribute must include dyngroup as well
+- fd#6321 [Tasks] - Make the generic tasks even more generic, allowing the object type string to be custom in case of added plugins
+- fd#6324 [Tasks] - Main tasks create slave objects related to a DN - current definition of attributeAccess is string with lifeCycle description
+- fd#6326 [Core] - Add orcid test method
+- fd#6330 [new section] - Workflow to integrate sub menu such as mail template and tasks
+- fd#6334 [CORE] - New behavior for template, automatic saving if no errors
+- fd#6335 [Core] - A new branding and therefore new logo is now available for FusionDirectory
+- fd#6364 [Core] - When lock mechanism is trigger - the user should not be editable if not unlock"
+
+#### fusiondirectory-plugins
+- fd-plugins#6249 Import eduPerson schema for orcid
+- fd-plugins#6272 rename the certificate icon
+- fd-plugins#6280 [Plugins] - update plugins to take into consideration the new directory of CORE structure
+- fd-plugins#6302 [Plugins] - Sinaps - deactivate sinaps in backend when installed - allowing remaining system unblocked
+- fd-plugins#6311 put the version 1.5 in all yaml for FusionDirectory 1.5 and change php version to 7.4
+- fd-plugins#6321 [Plugins] - Unix - trust all report a dn unknown when * is set
+
+### Removed
+
+#### fusiondirectory
+- fd#6333 [Core] - PhpSetup removal of the error collector mail to - considered not useful anymore
+- fd#6337 [Core] - remove the legacy theme
+- fd#6339 [Core] - remove leftover of dashboard in the core
+- fd#6341 [LifeCycle] - Removal of lifeCycle within CORE
+
+#### fusiondirectory-plugins
+- fd-plugins#6271 remove the legacy theme
+- fd-plugins#6275 remove leftover of dashboard in the core
+- fd-plugins#6281 remove ldif from ppolicy plugin
+
+### Fixed
+
+#### fusiondirectory
+- fd#6313 [CORE] - Snapshots - review of the current automatic creation logic
+- fd#6331 Use replacement icons for the one now in the plugins
+- fd#6332 Add an error log when the session is destroyed
+- fd#6360 [Mail] - When supann is available - the supannMailPrivee and potentially other are detected with label
+
+#### fusiondirectory-plugins
+- fd-plugins#6081 Do not record empty memberUid within mixedgroups
+- fd-plugins#6178 [Posix] - Template - TrustMode %askme% set as a service disables the entire table.
+- fd-plugins#6205 [Zimbra] - Lifecycle of Zimbra account - Errors of re-activation and auto-activation not working.
+- fd-plugins#6274 there is error in the variables_webauthn.inc are not correct for our packaged version
+- fd-plugins#6246 Plugin dyngroups missing icons
+- fd-plugins#6255 [Samba] - Samba tab cannot be removed when samba ID mapping is activated
+- fd-plugins#6270 [Kerberos] - Issue declaring class invisible without attrs
+- fd-plugins#6276 [GID - posix group] - issue with template not allowing to set GID.
+- fd-plugins#6322 [Template] - Issue when creating a template with empty password, error message should not be seen
+- fd-plugins#6309 there is a oid used twice in user-reminder
+- fd-plugins#6312 [Plugins] - Reminder attributes fdTasksReminderRecipientsMembers should not be mandatory within ldap
+- fd-plugins#6313 [fd-plugins] - User-reminder issue when supann is subStatus is set to none.
+- fd-plugins#6314 [Plugins] - user-reminder force the nextSubState to be checked
+- fd-plugins#6316 posix group not apply from user template
+- fd-plugins#6323 [Supann] - Supann Civilites is marked as "values" and therefore is badly translated.
+
+### Security
+
+#### fusiondirectory
+- fd#6363 [Security] - path traversal vulnerability - limited to png files
+
## %"FusionDirectory 1.4" - 2023-06-13
### Added
@@ -25,7 +138,7 @@
- fd#5966 Management configuration system
- fd#5970 Allow plugins to easily take part in the user locking process
- fd#5976 icons missing in filter selections in core
-- fd#5979 Samba and FD
+- fd#5979 Samba and Fusiondirectory
- fd#5980 Management should be a bit more flexible
- fd#5986 Add a reinitialisation button for the management configuration
- fd#5999 Allow ObjectsAttribute instances to specify filter elements
@@ -662,7 +775,7 @@
- fd#5729 PHP error in class_groupManagement.inc
- fd#5739 Links to objects might fail
- fd#5742 ACL handling for start/stop/restart service is broken
-- fd#5747 Deletion of objects should not treat ACL on each tab separately
+- fd#5747 Deletion of objects should not treat ACLÂ on each tab separately
- fd#5787 member_of_group should be set before attribute loading
- fd#5788 Failed lock attempt gives misleading error (password method does not support locking )
- fd#5798 Tabs are not working on ogroup templates
@@ -827,7 +940,7 @@
- fd-plugins#5724 SOA serial is rewriten to each reverse even if no modification is made to any record related to these domains
- fd-plugins#5725 Crash when I remove IP from a workstation with a DNS record
- fd-plugins#5729 SOA is not updated in reverse zones if there is no record change
-- fd-plugins#5745 PHP error in OPSI product properties
+- fd-plugins#5745 PHPÂ error in OPSI product properties
- fd-plugins#5747 Line number in CSV import error messages is incorrect
- fd-plugins#5754 Forward confirmation to manager does not work when extending the account expiration
- fd-plugins#5755 User reminder does not support accents in the message
@@ -849,7 +962,7 @@
- fd#5700 Non-existing classes in pluglist::$info
- fd#5705 Correct contributing remove part about using the templates link
- fd#5707 core-fd.schema still has gosa in description of attributes
-- fd#5711 ACL list have a PHP error when there are ACL on objects
+- fd#5711 ACL list have a PHPÂ error when there are ACL on objects
- fd#5712 Error text is wrong is some cases
- fd#5724 Error before login on Centos 7
- fd#5726 Log to fd behind an lemonldap::ng portal show debug log instead of main page
@@ -897,7 +1010,7 @@
#### fusiondirectory
- fd#5545 Unicity is only tested upon the same objectType
-- fd#5574 Groups RDN configuration is confusing
+- fd#5574 Groups RDNÂ configuration is confusing
#### fusiondirectory-plugins
- fd-plugins#5315 mail methods code should be reviewed and cleaned
@@ -1115,7 +1228,7 @@
### Fixed
#### fusiondirectory
-- fd#5362 PHP errors related to ogroup
+- fd#5362 PHPÂ errors related to ogroup
- fd#5410 edit conflict warning screen : "read only" button make the same page to reload
- fd#5422 There seems to be a problem with TimeAttribute
- fd#5426 Problems with PHP CAS on centos 7
@@ -1198,7 +1311,7 @@
- fd-plugins#5257 Error in ldap when we will that FAI use all the remain space
- fd-plugins#5295 Filter problem if dhcp object is in a department
- fd-plugins#5296 Name dhcp object differently when we use migration-dhcp
-- fd-plugins#5299 When using FD in portal mode, avoid showing applications (which are not web applications)
+- fd-plugins#5299 When using FDÂ in portal mode, avoid showing applications (which are not web applications)
### Security
@@ -1346,7 +1459,7 @@
- fd#5092 FD should not interfere with form handling
#### fusiondirectory-plugins
-- fd-plugins#5020 PHP errors in DHCP plugin with PHP7
+- fd-plugins#5020 PHPÂ errors in DHCP plugin with PHP7
- fd-plugins#5026 CSV import bug ?
- fd-plugins#5032 check that the information for main menu is right in FusionDirectory documentation
- fd-plugins#5044 Use simpleManagement in GPG plugin
@@ -1457,7 +1570,7 @@
#### fusiondirectory
- fd#4757 padlock next to user dn in edition screen is confusing
-- fd#4826 File docs/INSTALL must be updated or deleted
+- fd#4826 File docs/INSTALLÂ must be updated or deleted
### Fixed
@@ -1579,7 +1692,7 @@
- fd-plugins#4630 DNS adding reverse zone issue (tested on FD 1.0.10) in class B and class A
- fd-plugins#4635 [DNS] Reverse zone association breaks when there are several A record for the same domain.
- fd-plugins#4636 [SYSTEMS] When add Windows Workstation (winStation) and enable DHCP it will not be enabled when edit again
-- fd-plugins#4637 DNS tab won’t work on winstations
+- fd-plugins#4637 DNS tab won’t work on winstations
- fd-plugins#4676 Edit IDs problems related to our selenium test
## %"FusionDirectory 1.0.10" - 2016-03-20
@@ -1699,7 +1812,7 @@
#### fusiondirectory
- fd#4444 Debug log prevent connection in some cases
-- fd#4452 Adding a user to a group using "Groups and roles" tab creates some PHP errors
+- fd#4452 Adding a user to a group using "Groups and roles" tab creates some PHPÂ errors
- fd#4464 There are still traces of the rsyslog plugin in the schema and config class
- fd#4466 fixing deprecated warnings in php7
@@ -1742,7 +1855,7 @@
- fd#4390 bump all copyright to 20xx-2016
#### fusiondirectory-plugins
-- fd-plugins#4111 Clean FAI support daemon method
+- fd-plugins#4111 Clean FAI support daemon method
- fd-plugins#4227 Change default block size value in 1024
- fd-plugins#4238 ReadOnlyLDAPAttribute should be moved to class_attribute.inc
- fd-plugins#4292 Migrate last FAI classes to simplePlugin
@@ -1906,7 +2019,7 @@
- fd#3248 Plugins needs to be able to know which objectType they are opened as
- fd#3250 unique is checked only in the object base
- fd#3299 Use relative path for geticon
-- fd#3317 LDAP reorganization
+- fd#3317 LDAPÂ reorganization
- fd#3334 userManagement should be using simpleManagement
- fd#3383 Password change and hooks should be cleaned
- fd#3384 We need to remove manual handling of foreignKeys
@@ -1918,7 +2031,7 @@
- fd#3848 generic user view should be reorganized
- fd#3850 the DESC of each attribute and object should describe exactly the purpose of it
- fd#3851 it seems the gosaCacheEntry objectClass is no longer used
-- fd#3907 Rework CN and DN related options
+- fd#3907 Rework CN and DNÂ related options
- fd#3921 User templates should support roles
- fd#4051 Mac addresses should always be in lowercase
- fd#4100 The logout screen should be redone (session expiry)
@@ -1977,7 +2090,7 @@
- fd-plugins#3916 We should remove the class tabs
- fd-plugins#3981 remove the asterisk plugin from 1.0.9
- fd-plugins#3992 remove the fax plugin
-- fd-plugins#4034 Remove the FIXME in FAI about priority
+- fd-plugins#4034 Remove the FIXME in FAIÂ about priority
- fd-plugins#4066 Weblink refers to IPMI
- fd-plugins#4068 password.tpl is not used anymore it should be deleted
- fd-plugins#4107 the autodect button for the mac address should be removed
@@ -2012,7 +2125,7 @@
- fd#4064 PHP error when I delete a template
- fd#4073 CSV import is broken
- fd#4092 Base field should show "/" instead of being empty for root.
-- fd#4093 There are HTML errors in the code
+- fd#4093 There are HTMLÂ errors in the code
- fd#4137 Locked icon on users is broken
- fd#4141 check-deprecated should say which obsolete objectClass an entry is using
- fd#4144 Reference for ogroup not work
@@ -2025,7 +2138,7 @@
- fd-plugins#3354 Error about missing FAI class when creating a debian repository
- fd-plugins#3589 Must set blocksize > 0 to cancel
- fd-plugins#3740 CSV import is broken
-- fd-plugins#3745 Can’t create FAI profile
+- fd-plugins#3745 Can’t create FAI profile
- fd-plugins#3747 We cannot set a dhcp for a system
- fd-plugins#3751 Systems plugin is broken
- fd-plugins#3795 Copy of fai objects is not working
@@ -2688,7 +2801,7 @@
- fd-plugins#3053 Wrong objectclass names in Dashboard schema
- fd-plugins#3058 GUI corruption
- fd-plugins#3145 when install fusiondirectory-plugins-opsi, php class couldn't be loaded
-- fd-plugins#3148 Argonaut queue is crashing when trying to load FAI logs
+- fd-plugins#3148 Argonaut queue is crashing when trying to load FAIÂ logs
- fd-plugins#3153 When creating an FAI branch, subbranches should be created as well
- fd-plugins#3156 some icons are missing I only see the alternate text
- fd-plugins#3164 Servers service tab causes trouble with pluginfo div
@@ -4243,4 +4356,3 @@
- First stable release
-
diff --git a/UPGRADE.md b/UPGRADE.md
index 4c55bb363b0fdea4e47b18a103823e48e52df0fc..42c604a13ba3dcd18f2e83e2bd06fbd4552b58db 100644
--- a/UPGRADE.md
+++ b/UPGRADE.md
@@ -3250,7 +3250,7 @@ Fonctionality Added
-------------------
- The macro **%passwordClear%** is now available in the sambaAccount
- so that in can be used in hooks for AD sync.
+ so that in can be used in hooks for ADÂ sync.
- The ldapdump fonctionality is now available on the configuration
- The supann etablissment objects is now equal to entite objects
except for the attribute ou
@@ -3398,7 +3398,7 @@ fusiondirectory-migration-manager --list-deprecated List deprecated attributes a
argonautLdap2zoneAllowNotify (Fusion Directory - Argonaut, allow notify.) - 1.3.6.1.4.1.38414.2.13.2
fdHttpAuthActivated (FusionDirectory - HTTP Basic Auth activation) - 1.3.6.1.4.1.38414.8.15.6
fdHttpHeaderAuthActivated (FusionDirectory - HTTP Header Auth activation) - 1.3.6.1.4.1.38414.8.15.7
- fdCasActivated (FusionDirectory - CAS activation) - 1.3.6.1.4.1.38414.8.21.1
+ fdCasActivated (FusionDirectory - CASÂ activation) - 1.3.6.1.4.1.38414.8.21.1
gotoLogonScript (GOto - specifies a LogonScript) - 1.3.6.1.4.1.10098.1.1.11.10
gosaDefaultPrinter (Defines a default printer a user owns) - 1.3.6.1.4.1.10098.1.1.12.13
gotoHotplugDevice (GOto - keeps hotplug devices) - 1.3.6.1.4.1.10098.1.1.11.14
@@ -3465,6 +3465,144 @@ interfaces for this, run the **fusiondirectory-migration-manager
fusiondirectory-migration-manager --migrate-interfaces
```
+Migrate FusionDirectory from 1.4 to 1.5
+=======================================
+
+Upgrade FusionDirectory first
+-----------------------------
+
+Upgrade FusionDirectory core package before other ones to avoid
+dependencies errors:
+
+``` {.shell}
+apt-get install fusiondirectory
+```
+
+Upgrade FusionDirectory schema package too.
+
+``` {.shell}
+apt-get install fusiondirectory-schema
+```
+
+Upgrade of LDAP directory
+-------------------------
+
+Then update the core-fd-conf schema.
+
+``` {.shell}
+fusiondirectory-schema-manager --replace-schema /etc/ldap/schema/fusiondirectory/core-fd-conf.schema
+```
+
+Then update the core-fd schema.
+
+``` {.shell}
+fusiondirectory-schema-manager --replace-schema /etc/ldap/schema/fusiondirectory/core-fd.schema
+```
+
+if you are using the audit plugin plugin you have to update is schema
+
+``` {.shell}
+fusiondirectory-schema-manager --replace-schema /etc/ldap/schema/fusiondirectory/audit-fd-conf.schema
+```
+
+``` {.shell}
+fusiondirectory-schema-manager --replace-schema /etc/ldap/schema/fusiondirectory/audit-fd.schema
+```
+
+if you are using the public-forms plugin you have to update is schema
+
+``` {.shell}
+fusiondirectory-schema-manager --replace-schema /etc/ldap/schema/fusiondirectory/public-forms-fd-conf.schema
+```
+
+if you are using the supann plugin you have to update is schema and
+install a new one
+
+``` {.shell}
+fusiondirectory-schema-manager --replace-schema /etc/ldap/schema/fusiondirectory/internet2.schema
+```
+
+``` {.shell}
+fusiondirectory-schema-manager --insert-schema /etc/ldap/schema/fusiondirectory/eduperson.schema
+```
+
+``` {.shell}
+fusiondirectory-schema-manager --replace-schema /etc/ldap/schema/fusiondirectory/supann-fd-conf.schema
+```
+
+Check for deprecated attributes and objectClasses in your LDAP
+--------------------------------------------------------------
+
+- **fusiondirectory-migration-manager \-\--list-deprecated** to list
+ deprecated attributes and objectclasses
+
+Deprecated attributes:
+
+``` {.shell}
+fusiondirectory-migration-manager --list-deprecated List deprecated attributes and objectclasses Deprecated attributes:
+
+Deprecated attributes:
+ gotoLogonScript (GOto - specifies a LogonScript) - 1.3.6.1.4.1.10098.1.1.11.10
+ gosaDefaultPrinter (Defines a default printer a user owns) - 1.3.6.1.4.1.10098.1.1.12.13
+ gotoHotplugDevice (GOto - keeps hotplug devices) - 1.3.6.1.4.1.10098.1.1.11.14
+ gotoHotplugDeviceDN (GOto - points to hotplug devices) - 1.3.6.1.4.1.10098.1.1.11.18
+ gotoLogoffScript (GOto - specifies a LogoffScript) - 1.3.6.1.4.1.10098.1.1.11.19
+ gotoSyslogServer (GOto - Gonicus Terminal Concept, value syslogServer.) - 1.3.6.1.4.1.10098.1.1.1.1
+ gotoMode (GOto - Gonicus Terminal Concept, Terminal is active.) - 1.3.6.1.4.1.10098.1.1.1.24
+ gotoLdapServer (LDAP server to use) - 1.3.6.1.4.1.10098.1.1.1.38
+ gosaMailMaxSize (Block mails bigger than this value) - 1.3.6.1.4.1.10098.1.1.12.8
+ gosaSpamSortLevel (Spamassassins hits) - 1.3.6.1.4.1.10098.1.1.12.9
+ gosaSpamMailbox (Where to put spam) - 1.3.6.1.4.1.10098.1.1.12.10
+ argonautLdap2zoneAllowNotify (Fusion Directory - Argonaut, allow notify.) - 1.3.6.1.4.1.38414.2.13.2
+ fdPpolicyDefaultCn (FusionDirectory - cn of the default ppolicy) - 1.3.6.1.4.1.38414.45.1.2
+ fdHttpAuthActivated (FusionDirectory - HTTP Basic Auth activation) - 1.3.6.1.4.1.38414.8.15.6
+ fdHttpHeaderAuthActivated (FusionDirectory - HTTP Header Auth activation) - 1.3.6.1.4.1.38414.8.15.7
+ fdCasActivated (FusionDirectory - CASÂ activation) - 1.3.6.1.4.1.38414.8.21.1
+ fdAuditRotationDelay (FusionDirectory - Actions to be stored by audit plugin) - 1.3.6.1.4.1.38414.61.1.3
+```
+
+Deprecated objectClasses:
+
+``` {.shell}
+Deprecated objectClasses:
+ gotoTerminal (GOto - Gonicus Terminal Concept, objectclass) - 1.3.6.1.4.1.10098.1.2.1.1
+ gotoWorkstation (GOto - Gonicus Terminal Concept, objectclass) - 1.3.6.1.4.1.10098.1.2.1.30
+ gotoPrinter (GOto - Gonicus Terminal Concept, objectclass) - 1.3.6.1.4.1.10098.1.2.1.31
+ gotoEnvironment (GOto - contains environment settings) - 1.3.6.1.4.1.10098.1.2.1.32
+ gotoWorkstationTemplate (GOto - Gonicus Terminal Concept, objectclass) - 1.3.6.1.4.1.10098.1.2.1.34
+ gotoTerminalTemplate (GOto - Gonicus Terminal Concept, objectclass) - 1.3.6.1.4.1.10098.1.2.1.35
+ gotoDevice (GOto - contains environment settings) - 1.3.6.1.4.1.10098.1.2.1.42
+ GOhard (Gonicus Hardware definitions, objectclass) - 1.3.6.1.4.1.10098.1.2.1.3
+ goServer (Server description) - 1.3.6.1.4.1.10098.1.2.1.27
+ fdAsteriskPluginConf (FusionDirectory asterisk plugin configuration) - 1.3.6.1.4.1.38414.19.2.1
+```
+
+- **fusiondirectory-migration-manager \-\--check-deprecated** will
+ output a list of dn using old attributes and objectClasses
+
+``` {.shell}
+fusiondirectory-migration-manager --check-deprecated
+ cn=config,ou=fusiondirectory,dc=formation-fusiondirectory,dc=org contains an obsolete attribute
+ There are no entries in the LDAP using obsolete classes
+```
+
+- **fusiondirectory-migration-manager \-\--ldif-deprecated** will
+ output an ldif file on the console that you can use with ldapmodify
+ to clean you ldap server from old attributes.
+
+``` {.shell}
+fusiondirectory-migration-manager --ldif-deprecated
+dn:cn=config,ou=fusiondirectory,dc=formation-fusiondirectory,dc=org
+changetype:modify
+delete:fdAuditRotationDelay
+-
+
+# There are no entries in the LDAP using obsolete classes
+```
+
+If they are old objectClasses it will warn you and you will have to remove it by hand,
+they have been specified at the **fusiondirectory-migration-manager ---check-deprecated** step.
+
[php-cas]: http://packages.ubuntu.com/trusty/all/php-cas/download
@@ -3476,15 +3614,11 @@ fusiondirectory-migration-manager --migrate-interfaces
To improve this piece of software, please report all kind of errors using the bug tracker
on https://gitlab.fusiondirectory.org
-Documentation: https://fusiondirectory-user-manual.readthedocs.io/en/1.4/index.html
+Documentation: https://fusiondirectory-user-manual.readthedocs.io/en/latest/index.html
Mailinglist: https://lists.fusiondirectory.org/
-Irc: #fusiondirectory on libera.chat
---
The FusionDirectory project https://www.fusiondirectory.org/
-
-
Enjoy :)
-